GRWM Regulations 2016
The Health and Safety at Work (General Risk and Workplace Management) Regulations 2016 (GRWM Regulations) are the primary operational regulations under the HSWA 2015. They turn the Act’s broad duties into specific, practical requirements that apply to most workplaces.
This page is not legal advice. For specific compliance questions, consult a qualified health and safety advisor or lawyer.
What the GRWM Regulations cover
Section titled “What the GRWM Regulations cover”The GRWM Regulations are broad. The main areas relevant to most small and medium businesses are:
Risk management
Section titled “Risk management”The regulations set out how PCBUs must manage risks — this is the regulatory underpinning of the “identify, assess, eliminate or minimise” cycle that is central to SteadyOn.
Key requirements:
- Identify hazards that are, or could reasonably be expected to be, in the workplace
- Eliminate risks where reasonably practicable, or if not, minimise them using the hierarchy of controls
- Maintain and review control measures — they must be monitored to ensure they remain effective
- Keep records of hazard identification and risk management activity
SteadyOn support: The Hazard Register directly maps to these requirements. Each hazard record captures the identified hazard, risk assessment (likelihood × consequence), control measures in place, and a review date. The BRAG status flags when a review is overdue.
Emergency plans
Section titled “Emergency plans”PCBUs must prepare, maintain, and implement an emergency plan. The plan must cover:
- Effective emergency response procedures
- Evacuation procedures (coordinated with FENZ requirements where applicable)
- Medical treatment and assistance for injured workers
- Effective communication between the person managing the emergency and all workers
- Testing the emergency plan periodically
SteadyOn support: Emergency plans themselves are documents — store and version-control them in the Documents module. The Inspections module can be used to schedule and record emergency drill testing. The Training module tracks First Aid and Fire Safety certification for the people who will respond in an emergency.
Workplace facilities
Section titled “Workplace facilities”The regulations specify minimum facilities that PCBUs must provide for workers, including toilets, drinking water, hand washing facilities, eating facilities, and changing facilities (where applicable). These requirements scale with the number of workers.
SteadyOn support: Facility adequacy is best assessed through regular workplace inspections. Use the Inspections module (General Workplace Inspection template) to check and record facility compliance on a scheduled basis.
Remote and isolated workers
Section titled “Remote and isolated workers”If workers work remotely or in isolation (where it would not be easy for them to obtain help if they were injured or ill), you must have a system for monitoring their safety.
SteadyOn support: Use the Hazard Register to document the remote/isolated work hazard and the controls in place (check-in procedures, lone-worker devices, buddy systems). Corrective actions can track the implementation of these controls.
Specific hazard management
Section titled “Specific hazard management”The GRWM Regulations include specific requirements for managing:
- Hazardous work (work at heights, confined spaces, working with energised equipment)
- Hazardous substances (handling, storage, labelling, safety data sheets)
- Atmospheric conditions (dust, fumes, oxygen-deficient or enriched atmospheres)
- Plant (machinery, vehicles, equipment — guarding, maintenance, operator competency)
- Noise (noise levels, hearing protection, audiometric testing)
- Temporary or mobile worksites
SteadyOn support: Each of these maps to one or more hazards in your Hazard Register. The BRAG system ensures these hazards are reviewed regularly. Competency requirements (e.g. operator licences for plant) are tracked in the Training module (Equipment Operation and Hazardous Substances categories).
Documentation requirements
Section titled “Documentation requirements”The GRWM Regulations do not always specify exactly what records must be kept, but documented records are your evidence of compliance. Key things to document in SteadyOn:
| Requirement | Where to record in SteadyOn |
|---|---|
| Identified hazards and risk assessments | Hazard Register |
| Control measures for each hazard | Hazard Register — Controls field |
| Review and monitoring of controls | Hazard Register — Review date + audit log |
| Emergency plan (the document itself) | Documents module |
| Emergency drill test results | Inspections module |
| Hazardous substance SDS registers | Documents module |
| Plant maintenance and inspection records | Inspections module |
Relationship to the HSWA
Section titled “Relationship to the HSWA”The GRWM Regulations are made under the HSWA and must be read alongside it. The Act sets the duty; the regulations specify the minimum standard for discharging it. Where the regulations are silent, the HSWA’s general duty (“so far as is reasonably practicable”) still applies.
See HSWA 2015 Compliance and the NZ Regulatory Framework for the broader picture.